{"id":"CLSA-2026-1787229627","summary":"Fix CVE(s): CVE-2026-34180, CVE-2026-42766","details":"   * SECURITY UPDATE: fix ASN.1 decoder length truncation causing heap buffer over-read (tasn_dec.c)\n     - debian/patches/CVE-2026-34180.patch: fix ASN.1 decoder length truncation causing heap buffer over-read (tasn_dec.c)\n     - CVE-2026-34180\n   * SECURITY UPDATE: NULL check pwri-\u003ekeyDerivationAlgorithm in cms_RecipientInfo_pwri_crypt() (cms_pwri.c)\n     - debian/patches/CVE-2026-42766.patch: NULL check pwri-\u003ekeyDerivationAlgorithm in cms_RecipientInfo_pwri_crypt() (cms_pwri.c)\n     - CVE-2026-42766","modified":"2026-10-26T09:31:52.677091203Z","published":"2026-08-20T12:40:39Z","upstream":["CVE-2026-34180","CVE-2026-42766"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1787229627.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34180"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42766"}],"affected":[{"package":{"name":"libssl-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libssl-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-0+deb10u6+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787229627.json"}},{"package":{"name":"libssl-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libssl-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-0+deb10u6+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787229627.json"}},{"package":{"name":"libssl1.1","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libssl1.1?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-0+deb10u6+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787229627.json"}},{"package":{"name":"openssl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/openssl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1n-0+deb10u6+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787229627.json"}}],"schema_version":"1.9.0"}